ASLR Process Scanner

ASLR Process Scanner is the free command-line tool to scan and show all the ASLR enabled Processes.

ASLR (Address space layout randomization) is one of the effective security feature introduced since Windows Vista to protect Process against successful exploitation. It hinders some types of security attacks by randomizing the addresses. ASLR Process Scanner helps you to perform following things, Show all ASLR enabled Processes Show all Non-ASLR or ASLR disabled Processes Check the ASLR status of Process with the ID Check the ASLR status of Process with the name Check the ASLR status of Executable File Path Being a command-line tool makes it easy to automate through scripting. Also it can be handy tool for developers and researchers. It is available in both 32-bit & 64-bit versions and works on all Windows platforms starting from Vista to Windows 8.

How to use?

ASLR Process Scanner is very easy to use tool. It is command-line/console based tool, hence you have to launch it from the command prompt (cmd.exe). Here is the simple usage information

[For 32-bit Systems] ASLRProcessScanner32.exe [-h | -d | -p <pid> | -n <process_name> | -f <exe_file_path>] [For 64-bit Systems] ASLRProcessScanner64.exe [-h | -d | -p <pid> | -n <process_name> | -f <exe_file_path>]

Examples of ASLR Process Scanner

//List all ASLR enabled Processes ASLRProcessScanner.exe //List all Non-ASLR or ASLR disabled Processes ASLRProcessScanner.exe -d //Check if ASLR is enabled for Process with pid 1151 ASLRProcessScanner.exe -p 1151 //Check if ASLR is enabled for Process with name 'chrome' ASLRProcessScanner.exe -n "chrome" //Check if ASLR is enabled for Executable File ASLRProcessScanner.exe -f "c:\windows\explorer.exe" //Show this help screen ASLRProcessScanner.exe -h

Note that it includes both 32-bit and 64-bit version (ASLRProcessScanner64.exe). On 64-bit operating systems, you have to use the 64-bit version.

Screenshots.